Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
File: sq-qRAstZZOhKf6qKg_DHRo8X4E.mft (raw, json)
Hash identifier: 3Ojv4tbNkJROnTM/POcDBykZpM15c4L2Bzl4DpKgfDg=
Subject key identifier: 9A:EC:CD:91:86:7F:41:C4:25:F3:87:E7:58:8C:04:45:67:5A:67:98
Authority key identifier: B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
Certificate issuer: /CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Certificate serial: 019FA3E0A5B8AE5DB3522EEC573B19A25239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
Manifest number: 0128
Signing time: Mon 27 Jul 2026 14:00:36 +0000
Manifest this update: Mon 27 Jul 2026 14:00:36 +0000
Manifest next update: Tue 28 Jul 2026 14:00:36 +0000
Files and hashes: 1: 3v3q9uaO0I3Nwhq561xaonM_DTU.roa (hash: MppwYTWzIUYUlGXSC1GNbatY5HoguqVx5TkngM8EEDQ=)
2: sq-qRAstZZOhKf6qKg_DHRo8X4E.crl (hash: wygeplXhjEUTXlH9TLD25zybnJZFJhARzMdp+1v3iXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:a5:b8:ae:5d:b3:52:2e:ec:57:3b:19:a2:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Validity
Not Before: Jul 27 14:00:36 2026 GMT
Not After : Jul 28 14:00:36 2026 GMT
Subject: CN=9aeccd91867f41c425f387e7588c0445675a6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:bb:71:7c:f5:0c:d1:ca:38:e4:c6:bf:71:
4e:fa:09:e6:dc:c7:65:41:6a:0e:f7:ce:4f:78:b6:
d5:80:a7:df:40:35:a5:de:bd:28:c9:c0:14:78:1e:
a5:f8:42:ad:a2:6a:4d:55:b4:4e:2f:97:66:b8:80:
d5:31:1c:32:11:2b:f7:4f:7b:31:33:ec:c7:59:a7:
79:a0:9f:59:dd:ca:08:17:4d:62:24:8e:40:db:90:
a5:6e:4d:1c:93:69:ec:b1:92:e2:40:d2:2b:fd:c8:
36:a9:fb:43:07:77:fd:c8:e6:e2:4d:27:9f:5a:5b:
a2:f6:b2:13:07:ea:f9:cd:39:51:1c:5f:88:91:56:
59:4c:4f:dd:50:4a:1d:76:83:09:b3:e3:16:25:91:
b2:58:01:63:7a:0a:ab:1d:75:b7:94:9a:96:07:e2:
eb:4a:ee:f6:b1:f9:9f:51:48:ca:cf:7e:af:f7:d6:
2d:6a:3c:51:32:a3:cb:82:8c:58:c0:37:16:94:df:
8f:5e:37:8b:5c:b2:6d:7a:a2:e7:d5:b8:f9:fa:0e:
1a:28:ec:36:1e:5c:aa:4b:cb:fd:ee:82:86:73:14:
7f:ff:a1:e8:eb:d8:a1:c1:58:71:34:15:b8:b8:56:
b1:40:fd:2a:69:a9:c8:99:0a:6f:15:16:c8:11:95:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:CD:91:86:7F:41:C4:25:F3:87:E7:58:8C:04:45:67:5A:67:98
X509v3 Authority Key Identifier:
keyid:B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e7:a4:06:ca:f5:89:2d:4e:66:5f:67:05:d4:ad:c7:93:72:
4c:90:5d:79:30:59:19:9d:0e:b7:19:71:b5:e2:58:db:42:51:
43:53:11:e8:11:bd:62:6e:ab:84:32:d6:e9:a5:7f:d3:71:c3:
a0:e7:32:70:32:d7:72:26:6c:90:dc:08:fb:5f:be:d0:dd:91:
ac:9b:41:a8:8c:47:aa:b5:4d:17:e9:e2:97:90:fc:10:15:6c:
a3:e0:93:61:a4:0e:90:cc:a6:e6:1a:b9:b5:b8:dd:2d:54:da:
dc:67:eb:36:27:dd:c1:9a:1b:51:54:ac:cc:f6:74:f4:db:6e:
96:8c:1c:4d:c8:79:35:96:2a:4a:4c:30:93:83:da:18:49:78:
46:48:32:dd:4a:9a:53:1b:2c:e3:2c:b0:8a:16:62:01:3a:b2:
c5:49:3d:d7:a4:49:29:09:48:28:43:6a:e7:60:83:6f:38:10:
f3:f0:71:36:ac:28:70:1f:06:3f:a5:7e:d4:81:b6:1f:3d:2b:
94:44:d4:ea:8e:40:53:32:cf:56:1a:2f:60:6e:50:ea:ca:a1:
34:ac:07:58:8e:4a:40:af:77:f6:5d:76:be:49:ca:53:fe:33:
d3:73:da:0c:99:02:cb:c8:a9:72:a2:43:f7:0d:19:b9:e2:86:
97:7a:72:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4KW4rl2zUi7sVzsZolI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWZhYTQ0MGIyZDY1OTNhMTI5ZmVhYTJhMGZjMzFkMWEz
YzVmODEwHhcNMjYwNzI3MTQwMDM2WhcNMjYwNzI4MTQwMDM2WjAzMTEwLwYDVQQD
Eyg5YWVjY2Q5MTg2N2Y0MWM0MjVmMzg3ZTc1ODhjMDQ0NTY3NWE2Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKS7cXz1DNHKOOTGv3FO+gnm3Mdl
QWoO985PeLbVgKffQDWl3r0oycAUeB6l+EKtompNVbROL5dmuIDVMRwyESv3T3sx
M+zHWad5oJ9Z3coIF01iJI5A25Clbk0ck2nssZLiQNIr/cg2qftDB3f9yObiTSef
Wlui9rITB+r5zTlRHF+IkVZZTE/dUEoddoMJs+MWJZGyWAFjegqrHXW3lJqWB+Lr
Su72sfmfUUjKz36v99YtajxRMqPLgoxYwDcWlN+PXjeLXLJteqLn1bj5+g4aKOw2
HlyqS8v97oKGcxR//6Ho69ihwVhxNBW4uFaxQP0qaanImQpvFRbIEZWxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrszZGGf0HEJfOH51iMBEVnWmeYMB8GA1UdIwQY
MBaAFLKvqkQLLWWToSn+qioPwx0aPF+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3EtcVJBc3RaWk9oS2Y2cUtnX0RIUm84WDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC81MGMzZDEtMmJiMC00NjllLWI5YWUt
MzQ1ZmNiNmEwN2MzLzEvc3EtcVJBc3RaWk9oS2Y2cUtnX0RIUm84WDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC81MGMzZDEtMmJiMC00NjllLWI5YWUtMzQ1ZmNiNmEwN2Mz
LzEvc3EtcVJBc3RaWk9oS2Y2cUtnX0RIUm84WDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuekBsr1
iS1OZl9nBdStx5NyTJBdeTBZGZ0OtxlxteJY20JRQ1MR6BG9Ym6rhDLW6aV/03HD
oOcycDLXciZskNwI+1++0N2RrJtBqIxHqrVNF+nil5D8EBVso+CTYaQOkMym5hq5
tbjdLVTa3GfrNifdwZobUVSszPZ09NtulowcTch5NZYqSkwwk4PaGEl4Rkgy3Uqa
Uxss4yywihZiATqyxUk916RJKQlIKENq52CDbzgQ8/BxNqwocB8GP6V+1IG2Hz0r
lETU6o5AUzLPVhovYG5Q6sqhNKwHWI5KQK939l12vknKU/4z03PaDJkCy8ipcqJD
9w0ZueKGl3pyAA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 20:27:37 2026 by rpki-client